Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3136382e302f32342d3234203d3e2034373631.roa
File: 3131342e3134322e3136382e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: ao4JtDNRI4C2V01cHpiqIycOPOBFh23GnKT7lDwFJJg=
Subject key identifier: 87:98:A5:65:06:D9:EE:29:FF:CE:6C:D8:31:FA:D0:61:0F:FB:46:F4
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 40E81B9F587BD3E9DA392BEE99874E3DC92DBB0E
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3136382e302f32342d3234203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 16:50:43 +0000
ROA not before: Tue 03 Dec 2024 16:45:43 +0000
ROA not after: Tue 02 Dec 2025 16:50:43 +0000
asID: 4761
IP address blocks: 114.142.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 09:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e8:1b:9f:58:7b:d3:e9:da:39:2b:ee:99:87:4e:3d:c9:2d:bb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 16:45:43 2024 GMT
Not After : Dec 2 16:50:43 2025 GMT
Subject: CN=8798A56506D9EE29FFCE6CD831FAD0610FFB46F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:02:33:06:f6:aa:f5:08:8a:e5:05:b5:bc:
32:f8:0d:fa:be:a0:68:b3:8f:2e:65:62:4f:22:8f:
9c:e2:90:d3:63:2e:a1:20:32:3c:e5:aa:e5:75:26:
a4:15:f8:c8:08:d2:23:ed:a6:44:ec:21:c2:ae:a5:
46:6c:bf:c5:87:40:cf:0a:10:92:33:09:1b:c6:8a:
77:4d:4c:8a:54:ee:68:e0:04:f5:96:c8:b3:4a:4f:
98:98:6f:0d:98:2e:40:de:10:0e:a0:cc:1e:3f:38:
27:42:4d:2b:83:3d:f0:80:c7:bc:4e:e8:23:4c:64:
3d:2e:cf:41:5b:4c:47:ab:3a:e2:96:d3:01:2f:51:
7e:36:b2:a8:a9:5a:87:e3:f2:19:35:be:b0:d0:2e:
f9:27:69:c4:90:07:72:bf:d0:9a:9b:ef:2d:d1:ec:
44:11:46:8f:c1:ac:f2:18:6d:f2:21:94:43:f1:18:
94:6b:8e:08:8e:f8:6c:80:86:a3:30:75:e2:8c:74:
fc:10:c2:a5:65:fb:33:72:55:da:49:3a:89:d5:63:
45:f3:60:97:3e:b4:6c:4b:28:0d:e7:fa:a2:69:0c:
5f:b2:b3:df:33:51:ef:fd:b4:76:03:a7:4d:0d:db:
d2:a4:8c:55:a3:4a:0b:e3:04:bf:a7:6a:eb:0e:ef:
5c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:98:A5:65:06:D9:EE:29:FF:CE:6C:D8:31:FA:D0:61:0F:FB:46:F4
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3136382e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.142.168.0/24
Signature Algorithm: sha256WithRSAEncryption
18:91:b0:3e:50:c2:cf:aa:d8:41:6d:72:1e:06:68:4e:e1:3f:
64:85:6c:95:af:5f:1d:a9:f5:28:f6:7c:b2:35:79:94:0a:04:
d3:0a:0c:3f:99:a7:f9:8d:16:e0:04:83:83:cd:2c:80:09:44:
95:19:0f:b8:89:50:10:8a:d0:7b:e2:7c:e3:f9:51:ce:ec:c4:
9e:59:55:2a:34:9c:9e:fe:7c:27:ae:6e:31:74:fb:e4:f0:3b:
ef:14:90:04:e3:80:d2:bc:9a:c6:8e:41:b0:c4:02:16:a4:c7:
7e:c5:38:e2:91:02:bc:aa:c5:62:5b:7a:40:4d:68:57:e2:23:
1c:5b:c9:4b:b9:44:60:8b:d1:fc:dc:81:2a:0a:2b:8a:a6:0d:
e0:56:96:d2:1b:bc:09:e7:f9:80:a1:80:85:70:fb:e2:9b:3e:
b1:c7:df:47:f4:6e:a2:76:f5:c1:ac:df:68:f7:46:71:ab:32:
32:1c:47:80:91:c2:cc:0b:25:9c:9c:f1:59:eb:a8:50:0a:49:
a9:49:66:1a:48:05:ef:73:41:31:59:4f:f3:04:dc:37:d6:cb:
09:65:28:71:89:cf:12:4b:b6:28:9a:c9:3b:75:e7:ce:f6:82:
73:ad:53:04:7d:37:b6:0b:4a:58:c6:1a:54:b5:07:16:52:68:
35:c9:ff:8a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQOgbn1h70+naOSvumYdOPcktuw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDEyMDMxNjQ1NDNaFw0yNTEyMDIxNjUwNDNaMDMxMTAvBgNV
BAMTKDg3OThBNTY1MDZEOUVFMjlGRkNFNkNEODMxRkFEMDYxMEZGQjQ2RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgpQIzBvaq9QiK5QW1vDL4Dfq+
oGizjy5lYk8ij5zikNNjLqEgMjzlquV1JqQV+MgI0iPtpkTsIcKupUZsv8WHQM8K
EJIzCRvGindNTIpU7mjgBPWWyLNKT5iYbw2YLkDeEA6gzB4/OCdCTSuDPfCAx7xO
6CNMZD0uz0FbTEerOuKW0wEvUX42sqipWofj8hk1vrDQLvknacSQB3K/0Jqb7y3R
7EQRRo/BrPIYbfIhlEPxGJRrjgiO+GyAhqMwdeKMdPwQwqVl+zNyVdpJOonVY0Xz
YJc+tGxLKA3n+qJpDF+ys98zUe/9tHYDp00N29KkjFWjSgvjBL+nausO71zLAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUh5ilZQbZ7in/zmzYMfrQYQ/7RvQwHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYzZlZWY5LTcxM2MtNGU2Yi1i
MmJjLTRjMDQ1Mjg5MDM0NS8wLzMxMzEzNDJlMzEzNDMyMmUzMTM2MzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM3MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHKOqDANBgkqhkiG
9w0BAQsFAAOCAQEAGJGwPlDCz6rYQW1yHgZoTuE/ZIVsla9fHan1KPZ8sjV5lAoE
0woMP5mn+Y0W4ASDg80sgAlElRkPuIlQEIrQe+J84/lRzuzEnllVKjScnv58J65u
MXT75PA77xSQBOOA0ryaxo5BsMQCFqTHfsU44pECvKrFYlt6QE1oV+IjHFvJS7lE
YIvR/NyBKgoriqYN4FaW0hu8Cef5gKGAhXD74ps+scffR/Ruonb1wazfaPdGcasy
MhxHgJHCzAslnJzxWeuoUApJqUlmGkgF73NBMVlP8wTcN9bLCWUocYnPEku2KJrJ
O3XnzvaCc61TBH03tgtKWMYaVLUHFlJoNcn/ig==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:53:12 2025 by rpki-client